$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa File: 0917c851-a40a-30a1-a39b-23f91f1ca480.roa (raw, json) Hash identifier: OqNy5FleJxpRFKriSe6o8Hglx1N9epb//2dzr1GS63w= Subject key identifier: 35:A8:38:E6:A6:C1:5C:85:96:39:0B:89:AE:BD:EC:F9:D4:94:8D:8E Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AD3A129BDEBA8994E9B0CC080 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 49770 IP address blocks: 108.165.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:29:bd:eb:a8:99:4e:9b:0c:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=e63116d3-9bda-405f-a741-3b68f3166806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:b8:1c:dd:ac:aa:bb:db:d9:43:69:2c:8e: ed:fb:d1:d5:64:06:99:77:15:25:55:c0:50:55:fa: a7:18:a5:3a:2a:ac:a8:70:0f:71:d4:c4:08:a3:0d: 06:68:5f:b7:76:44:39:75:22:c7:a2:28:e3:a4:4f: c1:ef:ec:bc:8d:b5:e3:28:6c:39:46:50:0a:43:cc: 02:c6:da:ba:ef:72:5a:a0:2a:b0:bb:1b:34:f4:48: 06:30:41:f0:11:c4:e2:8e:15:c0:5c:12:df:b6:94: ee:24:94:12:2c:cc:09:c1:61:66:c2:a6:6d:2f:26: 2e:3c:fe:78:6b:4d:89:3b:e7:ea:76:db:4c:b3:97: 5e:9e:ac:c8:f4:d2:ad:9a:ca:a0:a5:71:6d:74:b8: cd:6e:10:33:fd:05:ae:05:31:01:2e:03:85:bc:e6: 65:43:9d:fe:de:d9:10:1a:b7:f9:59:1b:c8:9b:39: 99:f6:2d:0e:e5:dd:39:19:8d:d7:e0:91:d1:58:71: 47:07:f3:6c:e8:46:8f:3f:87:ab:54:6f:e9:e1:76: 77:c3:37:39:85:3d:bd:e8:a1:a0:f8:48:95:56:a6: b5:e5:7b:ad:49:9a:ea:cd:a0:9b:e2:10:c4:90:a0: af:49:ca:04:dd:f7:6d:20:95:48:f6:2a:11:3a:cb: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:38:E6:A6:C1:5C:85:96:39:0B:89:AE:BD:EC:F9:D4:94:8D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:97:1a:ce:ff:be:83:e9:e9:00:11:ec:e8:d5:4a:94:d6:05: 05:09:a8:54:13:30:9e:b2:0d:86:0f:76:67:04:87:63:5d:19: 7c:35:ee:55:9a:d4:4f:80:9d:fe:92:28:f4:0a:81:1a:cb:c1: 91:bc:c3:42:8e:f9:e7:c0:0f:c6:9e:ab:64:d2:94:94:39:9c: a2:69:6b:50:84:fc:12:5f:08:a3:02:89:71:ed:a6:28:8d:49: ac:97:80:15:1e:fd:5c:eb:78:0e:11:3e:83:52:2d:f3:03:9e: dd:eb:5b:20:03:67:59:7f:87:68:f4:69:ab:d8:e6:25:a4:19: ed:41:cf:3c:8f:34:1e:fb:af:09:8d:3f:bd:a4:d3:45:58:4a: 07:38:bc:91:5f:3a:67:0e:44:29:dc:e8:a0:c2:3c:43:b6:a1: f0:8a:12:6b:5b:67:cb:4a:b7:4b:4e:22:f3:f8:e5:1f:17:65: a7:37:f5:38:94:13:b8:19:5a:ff:62:fc:06:0a:f1:1a:fe:97: 46:b8:45:f1:62:ba:27:83:f4:7b:22:88:e1:9f:a9:09:25:29: 70:bd:5e:74:82:61:88:75:b0:df:e7:e2:1a:1a:f3:41:ee:e9: d0:fc:7d:84:e1:df:99:25:91:75:c3:27:88:0a:de:b1:ef:a4: 7f:a6:a9:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSm966iZTpsMwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZTYzMTE2ZDMtOWJkYS00MDVmLWE3NDEtM2I2OGYzMTY2ODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHS4HN2sqrvb2UNpLI7t+9HVZAaZdxUlVcBQ VfqnGKU6KqyocA9x1MQIow0GaF+3dkQ5dSLHoijjpE/B7+y8jbXjKGw5RlAKQ8wC xtq673JaoCqwuxs09EgGMEHwEcTijhXAXBLftpTuJJQSLMwJwWFmwqZtLyYuPP54 a02JO+fqdttMs5denqzI9NKtmsqgpXFtdLjNbhAz/QWuBTEBLgOFvOZlQ53+3tkQ Grf5WRvImzmZ9i0O5d05GY3X4JHRWHFHB/Ns6EaPP4erVG/p4XZ3wzc5hT296KGg +EiVVqa15XutSZrqzaCb4hDEkKCvScoE3fdtIJVI9ioROsuDqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWoOOamwVyFljkLia697PnUlI2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDkxN2M4NTEtYTQwYS0z MGExLWEzOWItMjNmOTFmMWNhNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2XGs7/voPp6QAR7OjVSpTWBQUJqFQTMJ6yDYYPdmcEh2NdGXw17lWa 1E+Anf6SKPQKgRrLwZG8w0KO+efAD8aeq2TSlJQ5nKJpa1CE/BJfCKMCiXHtpiiN SayXgBUe/VzreA4RPoNSLfMDnt3rWyADZ1l/h2j0aavY5iWkGe1BzzyPNB77rwmN P72k00VYSgc4vJFfOmcORCnc6KDCPEO2ofCKEmtbZ8tKt0tOIvP45R8XZac39TiU E7gZWv9i/AYK8Rr+l0a4RfFiuieD9HsiiOGfqQklKXC9XnSCYYh1sN/n4hoa80Hu 6dD8fYTh35klkXXDJ4gK3rHvpH+mqWI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:18 2025 by rpki-client